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Remote SIM Card Replacement and Activation Process 

The Field of the Invention 

The invention deals with replacement of data processing devices. Each data 
processing device is attached to a respective account identifying a subscriber. 
In particular, the invention applies to SIM (Subscriber Identity Module) card 

5 replacement and the corresponding activation process of new accounts. 
Remote SIM Card Replacement and Activation process applies in the GSM 
(Global System for Mobile Communication) world where SIM plays an important 
role in identifying subscribers to the GSM network operator for services such as 
voice communications, mobile services, and mobile transactions. In our 

10 illustrated example, the account will be identified typically with a parameter 
called IMSI (International Mobile Subscriber Identity), as is known in the art. 
Nevertheless, the invention is not limited to this example, and any other 
parameters identifying a subscriber account is part of the invention. 

15 The Background of the Prior Art 

In a GSM environment, a network operator purchases SIM cards from various 
SIM vendors in batch and need to provision all the information (Card ID, 
Account Information, and the like) on the SIM card to their network system as 
well as various backend systems before activating a SIM account. For postpaid 

20 subscribers who settle their bill after usage by means of account transfer, 
payments by check, for example, this activation can be done when subscribers 
register their information at the operator's point-of-sale (POS). On the other 
hand, for prepaid subscribers who must pay in advance for these network 
services, activation has to be done in advance so the card is already activated 

25 when the subscriber purchases the card from any distribution channel such as 
operator's POS or authorized dealers. 



30 



Each time the network operators roll out new services, or when these services 
require change of the SIM card, operators need to either send the new SIM 
card to their postpaid subscribers (as the subscriber information is registered), 
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or ask them to go to their nearest POS to exchange for a new SIM card. For 
prepaid subscribers, they have to purchase a new SIM card from the 
distribution channels to replace a current SIM card. 

5 The process and efficiency of SIM replacement become a hassle when large 
amounts of SIM cards need be replaced, causing subscribers undue 
inconvenience in most cases. The amount of backend processes involved in 
the postpaid scenario has been automated as a standard operation at the POS 
level, but not applicable to most operators when performing a remote (outside 

10 POS) card replacement For a prepaid subscriber's SIM replacement, it is even 
impossible in most operators when the existing account information is unknown 
to the network operators. Therefore, it is particularly difficult and a huge 
obstacle for network operators to roll out new services that require SIM card 
replacement. 

15 

Moreover, as operators are under tremendous cost pressure, pre-activating all 
prepaid accounts is always an issue due to investment in network equipment 
for pre-load accounts storage before activation. Most common network 
equipment, including the AuC (Authentication Center) and HLR (Home Location 
20 Registry) which has only fixed capacity per system for storing subscriber 
account information, have to be increased as more and more accounts are pre- 
loaded into these systems. 

WO 03/041445 discloses a system and method to allow the same terminating 
25 telephone number with multiple mobile telephones. A server is operable to 
receive the first call made from a new mobile phone and determine if a user of 
this new mobile phone is a returning user of a previous mobile telephone. In 
this case, the server obtains from the user of the newly activated mobile 
telephone, a telephone number of the previous mobile telephone and assigns 
30 this telephone number to the newly activated mobile phone. 

WO 02/018361 discloses a system and method for using a temporary electronic 
serial number for over-the-air activation of a SIM based mobile device. The 
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method comprises pre-programming the SIM card with temporary activating 
identifiers such as an IMSI, and/or a mobile identification number, and a 
temporary electronic serial number, and to use this temporary electronic serial 
number to identify the mobile device during registration and activation. Once 
5 the activation process is completed, the temporary activation identifiers are 
overwritten. 

The Summary 

A remote SIM replacement process is necessary to be in place to resolve the 
10 SIM replacement (and perform activation after replacement) issue. The process 
should ensure that proper security is in place to avoid fraud, and at the same 
time, should be fault proof without much user inconvenience and intervention. 
The solution should also enable a remote SIM card activation after replacement 
which can help the operators to provide just-in-time provisioning and activation 
15 of the accounts to the AuC, HLR and various backend systems. Thus, it can 
help operators better utilize the investment on the systems 1 capacity when 
. necessary. 

To this end, according to the invention, the new SIM includes 
20 - A one-time parameter (IMSI/Ki) known from the network (HLR.AuC), said 
one-time parameter being the active account, and 
- New parameters identifying a new account (IMSI/Ki) attached to a new 
data processing system, 

25 According to the invention, the activation steps are the followings: 

1) When the data processing system is switched on, the one-time IMSI/Ki is 
used to login to the network; 

2) Upon successful login to the network, a program stored in the new SIM 
automatically sends an activation request for activating said new 

30 account. 

Therefore, the invention provides SIM swapping and activation, which are in the 
hand of end user and the same One-time IMSI/Ki is used for a set of new cards. 
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Brief Description of the Drawings 

Figure 1 is a view of a computer system in which the invention can be applied. 

5 

Figure 2 is a file structure of the new SIM card, in place to facilitate the remote 
replacement and activation. 

Figure 3 is a diagram showing the information copied from the old SIM card into 
10 the new SIM card. 

Detailed Description 

To simplify the description, the same elements illustrated in the drawings have 
the same references. 

15 

Figure 1 is a view of a system that includes: 

- an old SIM card OCAR; 

- a new SIM card NCAR; 

- a SIM copy device; 

20 - a mobile phone MOB where a SIM card can be inserted into; 

- the mobile phone communicates with a SMS center SMSC; and 

- the SMS center SMSC communicates with a SIM data management 
SDM communicating with a plurality of entities able to manage the account 
attached to each SIM card. Management of a SIM card includes network 

25 authentication, mobile localization, and the like. 

For each SIM card, there are two basic elements on the card in order for the 
network to identify the subscribers: (1) a IMSI (International Mobile Subscriber 
Identity) and, (2) a Ki (Authentication key). The IMSI serves as the account 
30 identifier, whereas the Ki is used when the subscriber's mobile station 
(handset/phone) is requesting to logon to the network. There is an ICCID (IC 
Card Identifier) on the card in order for the operator to act as the SIM card ID as 
it serves as the serial number of the card in most cases. 
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The network authenticates the SIM card (identified by the IMSI value) based on 
the authentication result generated by the Ki and the on-card authentication 
algorithm, for example, the Comp128 algorithm defined in the GSM 

5 specification. In order for the subscriber to logon to the network, the IMSI and Ki 
value must be preloaded onto the network's AuC for a successful authentication 
to be performed. If the IMSI and Ki are not present in the AuC, the subscriber 
cannot logon to the network due to an inexistent IMSI entry. This will be the key 
in the replacement process that the IMSI, Ki pair of the card being replaced 

10 must be removed from the AuC, followed by the replacement of the new IMSI, 
Ki value of the replacement (new) card. 

There are two aspects to the solution, that is, the Remote SIM Card 
replacement and the Remote SIM activation. 

15 

There are three components in the SIM Card replacement process: 

- 1) The old SIM card OCAR; 

- 2) The new SIM card NCAR; and 

- 3) Any form of SIM copy device COP (hereafter refer as 'the SIM copy ' 
20 device 1 ) which can read and write SIM data in and out from the old and 

into the new SIM (e.g., a software on PC with a smart card reader 
attached, a customized hardware device to read and write onto the smart 
card). 

25 The Old SIM Card OCAR contains existing account information. The NEW SIM 
Card NCAR contains the following information: 

1 . The new IMSI , KI in a hidden file ready to be activated; 

2. A One-time IMSI, One-time KI in order for the new card to get the 
access to the network to perform one-time activation request; 

30 3. The ability to make phone calls to predefined phone numbers only 

before activation with the One-time account. This One-time 
account will be described in detail in the next section. Usually, the 
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predefined numbers will be the customer care center number in 
case for any query. 
4. A small hidden application with the ability to send out an 
Activation Request to a dedicated address for account activation 
5 by SMS, USSD String, or any other means to inform the backend 

for such request when the user initiate an Activation Request in 
the form of menu selection on the phone, or auto-trigger after the 
One-time account activation. 

10 The SIM copy device COP copies the following information from the OLD 
card to the NEW card: 

- The ICCID and IMSI from the OLD card to the NEW card hidden 
file; 

- The Phonebook entries from the OLD card to the NEW card 
is Phonebook file; 

- The Short Message Service (SMS) entries from the OLD card to the 
NEW card SMS file; and 

- Any other customized information from the OLD SIM to the NEW 
SIM. 

20 

In remote card replacement, the SIM copy device COP copies all OLD card 
information (ICCID, IMSI, Phonebook, SMS entries, etc) from the old card 
OCAR into the new SIM card NCAR so that the NEW SIM sends out an 
Activation Request to the network with the Old Account information (OLD 
25 ICCID, OLD IMSI) and the NEW Account information (NEW ICCID, NEW IMSI). 

Since the SIM copy device COP also copies the phonebook, SMS entries, and 
the like to the NEW SIM, upon new card activation, the new SIM NCAR will 
preserve all the old card information with the new services in placed. 

30 

In this example, after the NEW card NCAR has sent out the Activation Request, 
another component at the network side, namely "the SIM Data Management 
System" SDM, processes the Activation Request. The SIM Data Management 
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System SDM mainly serves the following purposes: 

1 . Receive Activation Request from the subscribers; 

2. Deactivate the Old account based on the information received (Old 
ICCID, Old IMS!) from the subscriber. Deactivation will be done on the 

5 AuC, HLR, or any other systems required; and 

3. Activation of the New account based on the information received (New 
ICCID, New IMSI) from the subscriber and provision to the AuC, HLR, or 
any other systems required. 



10 
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With the SIM Data Management System in place, it is not required to provision 
all the account information into various systems before activation. The 
activation will be done in a a just-in-time n fashion which greatly saves space on 
the AuC and the HLR. 

5 

The reason a one-time IMSI/Ki is used rather than the new IMSI/Ki is to ease 
the number of activated subscriptions. An advantage is that the SIM Data 
Management Server SDM determines in which HLR/AuC the new IMSI/Ki 
resides at the time of activation. Consequently, this allows better management 
10 of HLR subscription capacity and the one-time IMSI/Ki is shared with multiple 
cards. 

The purpose of the new card before activation is to send the activation request. 
This is why every new card uses the same number as long as the information 
is sent out from the new card NCAR contains the OLD card's IMSI and NEW card 
(SCB) embedded IMSI for reference. 

This solution minimizes any user error/involvement by making use of OLD card 
information when the NEW card is inserted into the handset after information 
20 transfer from the device or any terminal/reader has been carried out. The 
following describes the steps associated with the components mentioned in the 
foregoing description. 

Step 1: Subscriber Replaces the Old SIM Card. 

25 

A subscriber purchases or receives a new SIM card from the operator or from 
the operator's distribution channel. Thanks to the SIM copy device from the 
distributor or purchased or sent together with the new SIM card NCAR, the 
subscriber can copy all the existing (also refer to as "old") information from the 
30 existing SIM card to the new SIM card NCAR. 

Figure 2 gives an example of a new SIM file structure in place to facilitate the 
remote replacement and activation. 



WO 2004/105421 



9 



PCT/IB2004/001616 



Figure 3 shows part of the files stored in the old card OCAR and the new SIM 
card NCAR. On the left of this figure, we have represented the old SIM file 
structure and on the right the new SIM file structure (we have only represented 

5 the related files). More particularly, arrows indicate the information copied from 
the old OCAR into the new SIM card NCAR. The SIM copy device COP copies 
the following information from the old SIM to the new SIM according to the 
location in the previous table. In this example, the One-Time IMSI and Ki is an 
existing account on the network for all the new cards to logon to the network for 

10 Activation Request. The account cannot make phone calls due to the network 
setup as well as on-card FDN (Fixed Dialing Number) enabled for Customer 
Care center only. 

Step 2: Subscriber Activates the New SIM Card 
is In this example, the subscriber puts the new SIM card NCAR in the mobile 
device MB to start the first Activation Request. Upon insertion of the new SIM 
card NCAR, the SIM card and the Auto-Activation application perform the 
following steps: 

20 1 . The new SIM Card NCAR authenticates with the network using the One-time 
IMSI and the response calculated from the One-time Authentication Key, Ki. 

2. Upon successful logon to the network, in this example, the Auto-Activation 
application sends out a Activation Request to the SIM Data Management 
Server SDM connected to the SMSC. The application sends information (with 

25 encryption and checksum) that includes, for example: 

- The Old ICCID and the Old IMSI in the temporary file that is to be disabled; 
and 

- The New ICCID and the New IMSI from the hidden file that is to be enabled. 
For security reasons, old/new KI are not sent out at any time by the applet; Only 

30 IMSI, ICCID are sent. 

3. Upon successful sending of the Activation-Request-SMS, the Auto-Activation 
application exchanges the One-Time IMSI and One-Time Ki with the New IMSI, 
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and New Ki in the hidden file to replace the existing IMSI and Ki value. It then 
enables the ADN and disables the FDN. 

In this example, it prompts the user to "Activation in Progress 0 and prompts the 
5 user to switch off the phone. The new SIM waits for the SIM Data Management 
System to activate the account. 

On the SIM Data Management SDM Side, the action are as follows: 

1. The SIM Data Management SDM receives the Activation Request, decrypts 
10 the information and checks against the checksum for validity. It then looks up 

from the other network repository the account information in order to deactivate 
the account. 

2. There are two approaches the network operator takes with regards to the Old 
account IMSI/Ki deactivation and New account IMSI/Ki activation: 

15 a) Deactivate Old Account and Activate New Account: 

In this case, the old account information does not carry forward to the 
new account and the SIM Data Management System SDM issues 
commands to various systems like, AuC, HLR, a Customer Care CCR, 
Billing System BS, to deactivate/remove the old account and 

20 activate/create the new account in the above systems. 

b) Change Old Account and Carry Forward to New Account: 
In this case, the old account information carries forward to the new 
account and the SIM Data Management System SDM simply issues 
commands to various systems to carry the old account information to the 

25 new one and replace the Old account information in the HLR, AuC by the 

New account 

3. Advantageously, upon successful deactivation Old Account and activation of 
the New Account, the SIM Data Management System SDM can send, for 
example, an optional SMS to confirm the activation to the subscriber. If the 

30 SMS is successfully delivered to the handset within a predefined period, the 
system can record that a successful activation has been carried out. 

4. If any failure has occurred during the 1) deactivation, 2) activation, or 3) 
sending of such optional Confirmation-SMS, a proper exception handling 
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process can be defined by an appropriate workflow, i.e., sending an alarm to 
the Customer Care to investigate and take corrective measures on the recovery 
procedure at the backend. 

5 Figure 1 shows a view of the different steps involved. Arrows referenced with a 
respective number (1 to 6) indicate the direction of each message. The different 
steps are: 

1 . The SIM copier COP copies the old ICCID, IMSI to the New Card. 

2. NEW SIM card NCAR is inserted into the phone MOB, logon to the network 
10 using the One-time a/c. It then sends out the old and new card information in 

step 3. Upon successful sending, New IMSI and Kl are overwritten to replace 
the existing One-time account waiting for activation. 

3. The card NCAR sends out the Activation Request with "Old ICCID/IMSI, New 
ICCID/IMSr information to the backend using this One-Time a/c. 

is 4. A dedicated SMSC receives the Activation Request, and passes the request 
to SIM Data Management SDM. 

5. SIM Data Management system SDM processes the request, fetches for the 
corresponding account information from the Old and New ICCID/IMSI, and 
performs backend replacement/activation process. 
20 6. SIM Data Management system SDM updates various systems, including 
AuC for Card Activation. 
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CLAIMS 

1. A data processing device including a microcontroller and configured to 
communicate with at least one remote system distributed on a network, said 

5 data processing device and said remote system adapted to store a plurality of 
parameters identifying a user account belonging to a subscriber, said data 
processing device comprising: 

a one-time parameter comprising the active account attached to said 
device designed for a one-time use, 
10 a permanent parameter identifying an account attached to said data 

processing device, said permanent parameter being deactivated, 
wherein said one-time and permanent parameter are stored in said at least one 
remote system, and said microcontroller is programmed to: 

a) using the one-time parameter to logon to the network when said data 
15 processing device is switched on; 

b) exchanging the one-time parameter with the permanent parameter, upon 
successful logon to the network, said permanent parameter becoming 
the permanent active account, 

wherein said first device and said at least one remote system store a parameter 
20 identifying a current active account attached to a second data processing 
device to replace, and upon successful logon to the network, a program 
automatically stored in said first device sends an activation request for 
exchanging the plurality of parameters from the old for the new one in said at 
least one remote system, with the current active account being deactivated. 

25 

2. The data processing device of claim 1, wherein said activation request 
includes at least one old parameter and/or at least one new parameter for 
identifying the device requesting an account activation. 

30 3. The data processing device of claim 1 , wherein said one-time parameter is 
the same for a set of data processing devices replacing a respective old data 
processing device. 
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4. The data processing device of claim 1 , wherein the subscriber switches on 
said data processing device. 

5. The data processing device of claim 1 , wherein after receiving the activation 
5 request from said first device, it sends commands to said at least one remote 

system for exchanging the current active account corresponding to the second 
device into the new active account corresponding to the first device. 

6. The data processing device of claim 1, wherein the logon step a) is 
10 performed in a centralized remote system and after receiving the activation 

request from said device, said centralized remote system sends commands to 
said at least one remote system for exchanging the current active account 
corresponding to the second device into the new active account corresponding 
to the first device. 

15 

7. The data processing device of claim 1 , wherein the step b) is performed in 
said device by means of an auto-activation application executed after receiving 
a message from the network informing a successful logon. 



20 
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